Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61cb09a8-69ba-3cfc-ab74-44157770e876.roa
File:                     61cb09a8-69ba-3cfc-ab74-44157770e876.roa (raw, json)
Hash identifier:          AznJOpxyHZI6TnPCN3fkR5zU8NWG5/33BXeNeh04l6Y=
Subject key identifier:   C9:00:65:6C:B7:27:37:C1:13:6A:E5:02:43:63:8E:B7:4F:90:F3:67
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D91C00A3053320C21F7604400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61cb09a8-69ba-3cfc-ab74-44157770e876.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     30036
IP address blocks:        2604:2e8f:c400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0a:30:53:32:0c:21:f7:60:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=0e9339de-8fb5-42ba-b1b3-7aa2564e4e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:53:13:68:4b:4b:88:c4:a1:aa:58:38:a5:
                    f4:f9:ca:4a:2e:74:d4:15:70:45:be:cc:56:5e:d8:
                    31:40:07:3c:82:56:b8:73:27:c6:92:0d:bb:32:59:
                    8f:ba:0e:60:9b:9e:b0:f4:ef:c0:95:1e:3d:bc:16:
                    16:49:11:e9:06:34:72:b7:52:79:b7:82:57:13:b4:
                    53:6c:a0:cc:02:8f:7d:59:8d:67:d9:cd:28:72:44:
                    99:00:2a:f5:74:e8:c9:ca:74:a1:a5:0b:28:9b:0d:
                    5b:c9:5c:45:4b:2d:05:92:8c:59:30:3d:68:cd:4f:
                    25:a2:11:c3:35:18:60:37:e3:df:9f:ea:93:2e:a2:
                    80:ac:94:58:37:35:70:c6:8a:3f:31:cb:54:39:53:
                    5d:2a:ab:bb:7c:ab:68:da:3a:6d:b0:eb:95:05:fb:
                    63:16:53:71:8b:72:a5:c7:59:92:3c:eb:48:d9:f6:
                    d3:7f:46:b1:8d:3e:28:af:fd:01:b9:34:b7:b8:65:
                    2f:eb:05:1f:13:cb:94:63:c2:59:3d:91:b4:42:c1:
                    d1:19:06:5a:e9:80:74:43:bf:6f:19:a7:2c:56:6c:
                    eb:7c:8e:3b:5a:04:8f:f9:06:e5:ec:40:ea:3a:5c:
                    43:44:13:29:b2:cb:66:c4:25:a5:68:dc:bc:83:14:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:65:6C:B7:27:37:C1:13:6A:E5:02:43:63:8E:B7:4F:90:F3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61cb09a8-69ba-3cfc-ab74-44157770e876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:c400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:57:6e:25:da:3a:02:12:ea:8a:ed:d4:75:d1:9b:c5:d3:8c:
         b2:65:b3:f4:a8:1b:93:26:fc:de:6a:48:0e:2b:c0:16:63:77:
         3b:0b:79:cb:1d:fe:b0:7d:f8:89:3d:00:1f:2c:02:39:78:f8:
         47:ab:97:89:e7:05:7c:23:8f:a8:2c:06:2a:77:cc:e5:99:c0:
         d2:3d:fb:3c:24:9d:e1:ab:cc:22:00:ea:b3:68:91:03:31:0c:
         cd:45:3b:f2:b7:cf:17:0b:6d:55:49:33:72:17:11:e4:c2:28:
         92:4d:79:b4:67:ce:f9:57:d4:20:8a:ed:05:a1:1c:23:01:10:
         7f:ad:72:72:cd:ed:84:99:3d:b1:cb:1b:32:9b:24:22:09:23:
         1c:53:7f:e7:f5:c3:fc:30:48:16:4b:03:7b:c1:bd:bb:7c:f9:
         26:2c:5b:77:72:8b:e4:2f:be:d1:ff:f9:a5:cd:51:69:b5:0b:
         c8:4e:3f:4b:59:5a:7a:1e:30:8b:0b:d7:05:7f:ed:a1:ac:f7:
         2e:44:01:2b:f9:ac:4e:df:f0:ff:89:c9:c4:df:98:25:6a:67:
         4d:44:a6:6d:7f:39:36:d6:05:fe:2c:98:d2:2a:de:85:e6:b3:
         2d:56:b1:ed:5d:db:bf:5d:da:83:b5:de:43:da:29:e1:aa:2e:
         6c:c4:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 18:26:56 2026 by rpki-client